2020

A security feature bypass vulnerability exists in Microsoft Outlook when Office fails to enforce security settings confi

A spoofing vulnerability exists when theMicrosoft Edge (Chromium-based) in IE Mode improperly handles specific redirects

A denial of service vulnerability exists when Windows Registry improperly handles filesystem operations, aka 'Windows Re

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall

An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requ

A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file o

A symbolic link vulnerability in some Lenovo installation packages, prior to version 1.2.9.3, could allow privileged fil

A DLL search path vulnerability could allow privilege escalation in some Lenovo installation packages, prior to version

In FreeBSD 12.1-STABLE before r361918, 12.1-RELEASE before p6, 11.4-STABLE before r361919, 11.3-RELEASE before p10, and

Your Online Shop 1.8.0 allows authenticated users to trigger XSS via a Change Name or Change Surname operation.

The SportsPress plugin before 2.7.2 for WordPress allows XSS.

This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.5. An application may be able

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Catalina 10.15.5. A malici

An issue existed in the pausing of FaceTime video. The issue was resolved with improved logic. This issue is fixed in iO

A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.5

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.5. A mal

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.5. A mali

A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS

A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5,

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Catalina 10.15.5. Inserting a USB d

A logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1.1. A malicious process may ca

An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.5 and iPadO

A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13.5 and iPadOS 13.5, macO

This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.5. Importing a maliciously cr

Insecure authorization in Project Deploy Keys in GitLab CE/EE 12.8 and later through 13.0.1 allows users to update permi

OpenCart 3.0.3.3 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upl

Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration s

An assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions before QEMU 5.0.1. Thi

OWASP json-sanitizer before 1.2.1 allows XSS. An attacker who controls a substring of the input JSON, and controls anoth

An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML atta

An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. include/rcmail_output_html.php allows

Arm Armv8-A core implementations utilizing speculative execution past unconditional changes in control flow may allow un

Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile

It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-p

OpenSearch Web browser 1.0.4.9 allows Intent Scheme Hijacking.[a link that opens another app in the browser can be manip

An issue was discovered in LinuxTV xawtv before 3.107. The function dev_open() in v4l-conf.c does not perform sufficient

An issue was discovered in dbus >= 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, leaks file d

ODF documents can contain forms to be filled out by the user. Similar to HTML forms, the contained form data can be subm

LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote

angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code in

FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parse_playlist in libavf

HESK before 3.1.10 allows reflected XSS.

The Neon theme 2.0 before 2020-06-03 for Bootstrap allows XSS via an Add Task Input operation in a dashboard.

showAlert() in the administration panel in Bludit 3.12.0 allows XSS.

In WSO2 API Manager 3.0.0 and earlier, WSO2 API Microgateway 2.2.0, and WSO2 IS as Key Manager 5.9.0 and earlier, Manage